Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
File:                     ZRHOXi9Tt7uMrI854pTomkWyACk.mft (raw, json)
Hash identifier:          K2w6vawziwDxTNZztH9mz6absWLu381HJuzvnLrerrY=
Subject key identifier:   CB:73:A1:0A:ED:17:C0:09:E8:07:91:4D:2B:4B:BA:93:DC:F2:3A:57
Authority key identifier: 65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
Certificate issuer:       /CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Certificate serial:       0198485319AF9DB33483EED366CBC3D30581
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
Manifest number:          1601
Signing time:             Sat 26 Jul 2025 20:01:02 +0000
Manifest this update:     Sat 26 Jul 2025 20:01:02 +0000
Manifest next update:     Sun 27 Jul 2025 20:01:02 +0000
Files and hashes:         1: ZRHOXi9Tt7uMrI854pTomkWyACk.crl (hash: l2NrIxrZ4Vfl5qei+8Rrt4kogiFuLBA2ed6buX+khuc=)
                          2: ckxfsidkq0zDgn8HR-xIWsqm2AQ.roa (hash: WdjOIbcaJnLXbL/Nx00pV5xdwXgfnCo9JLmJy57TSjE=)
                          3: rS8McXzCkBbcVb5uezFTBLPdaiQ.roa (hash: KC6Lr4AJ8lP/HwGwdQX+pnrzkPDHp47sMoI3Dyq3FbM=)
                          4: uYm5oYNq-JACxgzZxNgku-KZuSg.roa (hash: mMvblRec/LXUeEQXaAaSvKQKI7NqUb/x663S4SMp3Ck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:53:19:af:9d:b3:34:83:ee:d3:66:cb:c3:d3:05:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
        Validity
            Not Before: Jul 26 20:01:02 2025 GMT
            Not After : Jul 27 20:01:02 2025 GMT
        Subject: CN=cb73a10aed17c009e807914d2b4bba93dcf23a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:03:2b:eb:9d:ae:85:0c:89:1c:4d:ca:e7:4e:
                    f9:31:8c:4a:e7:f1:8a:ca:df:4e:75:d1:00:29:3b:
                    6e:b8:1e:c7:02:df:37:3d:fb:53:d8:f4:d9:07:81:
                    3b:77:d3:1d:d6:33:45:88:10:3f:6f:2b:55:a5:74:
                    44:44:70:f0:3e:4c:9f:5e:08:6a:43:f6:09:f8:e1:
                    f1:ad:0f:4e:47:69:5c:67:6c:50:cc:a2:a7:f2:1f:
                    81:77:88:75:37:4c:e3:ee:96:e1:97:c1:66:f8:98:
                    44:31:0f:51:63:5d:9e:02:e8:ee:4d:9e:b8:48:a9:
                    c2:ad:8c:11:00:5a:5f:87:ec:98:a4:6d:48:23:6e:
                    19:ee:cb:69:9a:0a:b7:37:a2:2b:dc:78:51:e7:a3:
                    68:56:dc:96:be:a8:15:75:ee:3c:a3:db:05:0c:bd:
                    2d:b6:f5:84:5b:76:57:02:3b:31:80:d2:7a:52:4f:
                    99:c9:bd:51:61:9a:2b:74:ff:47:47:45:80:90:9c:
                    10:fd:a6:c4:e4:01:14:4a:fd:31:f2:5e:63:fd:41:
                    71:53:9e:f5:bf:ad:d9:06:8b:13:0c:13:2f:0b:eb:
                    f2:5a:f5:52:f1:74:26:11:b3:26:f1:17:75:35:91:
                    9e:2b:9f:0a:80:b1:48:fd:88:29:95:9e:fd:2d:d6:
                    e5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:73:A1:0A:ED:17:C0:09:E8:07:91:4D:2B:4B:BA:93:DC:F2:3A:57
            X509v3 Authority Key Identifier:
                keyid:65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:50:4d:35:3a:94:7d:20:4e:20:87:aa:22:9c:a3:63:9e:f6:
         1a:43:aa:de:fe:16:ea:fa:32:a7:1c:bc:7d:46:5f:ff:5f:48:
         78:73:96:4a:13:a8:05:f9:49:11:05:95:87:ac:e1:01:35:5a:
         c6:08:51:5e:9a:de:55:1e:c7:d3:46:50:33:2d:ac:b4:78:29:
         af:bc:41:66:ed:83:64:95:86:f8:3c:49:35:25:4f:8c:8e:ac:
         58:03:8a:a5:73:82:1a:42:fc:30:a5:94:44:32:4b:e6:26:38:
         ec:23:53:96:83:09:ba:b1:7d:6e:b0:4d:f5:77:41:96:91:a0:
         a1:89:26:56:0d:4b:6b:dd:f7:a1:50:96:a5:15:73:c1:e3:2d:
         65:01:84:91:9a:9c:86:9c:42:f8:a2:26:ee:09:da:d5:d6:21:
         59:6a:e2:b2:92:9a:4e:8d:49:bc:d1:f4:e6:4a:43:aa:5b:74:
         5e:69:35:48:c5:d9:77:57:af:64:f8:1b:b3:a3:cd:00:af:1c:
         ce:c6:32:4b:2a:5b:d0:94:96:f2:92:a3:7b:af:55:1c:ff:bf:
         62:73:ea:00:a2:17:3b:87:4d:22:be:15:da:ef:39:88:17:98:
         d4:4a:81:72:1e:9b:37:6f:ac:2b:5f:dd:10:59:61:b0:de:38:
         90:ec:95:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:29:49 2025 by rpki-client